Harden CI and release artifacts

2026-08-11 23:15:18 +09:00
parent ed2ba07ce1
commit a0750e4d5f
8 changed files with 107 additions and 39 deletions
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -30,6 +30,12 @@ jobs:
      - name: Run tests
        run: go test ./...

+      - name: Run vet
+        run: go vet ./...
+
+      - name: Check reachable vulnerabilities
+        run: go run golang.org/x/vuln/cmd/govulncheck@v1.6.0 ./...
+
      - name: Build release archives
        env:
          RELEASE_TAG: ${{ inputs.tag }}